Latest news
According to recently published Websense report for the second half of 2009, 95 percent of user-generated posts on Web sites are spam or malicious, and almost 14 percent of the searches for buzz words/trending news led to malware. Add to this the fact that 86 percent of all emails is spam and 81 percent contained a malicious link, and you might be forgiven for thinking that soon the Internet and we ourselves will be drowning in a sea of unwanted and damaging content.
More bad news is that the malware we are exposed to while surfing is located in 71 percent of the cases on legitimate sites that have been compromised, and that the average time it took for anti-virus vendors to deliver a patch once malware was identified was 46 hours! Compared to the 22 hours it took them in the first six months, they are definitely not moving in the right direction.
What can we expect in 2010?
- More and more blended threats will target computers and trap them into botnets
- Smart phones, computers running Windows 7, search engines and legitimate websites will be used by the criminals as infection vectors
- Spam and attacks on the social Web and search engines that added real-time search capabilities will increase in frequency
- Botnets will start showing a more aggressive behavior - bots will be able to detect and actively uninstall competitor bots
- Flaws in Windows 7 and IE 8 will be exploited
- SEO poisoning attacks will continue to undermine the trust in search results
- Vulnerabilities in iPhone and Android will also be taken advantage of more often, especially since mobile phones are increasingly being used for financial transactions
- As Macs gain popularity, they will the attacks that target them.


Spotlight

The security of WordPress plugins
Posted on 18 June 2013. | Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers
Posted on 17 June 2013. | George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?
Posted on 14 June 2013. | Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud
Posted on 12 June 2013. | nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal
Posted on 11 June 2013. | Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.






